Notice pursuant to Art. 13 of EU Regulation 2016/679 regarding handling of personal data

Pursuant to Art. 13 of EU Regulation 2016/679 (hereinafter GDPR), containing provisions for protection of individuals and other subjects with regard to the processing of personal data, we hereby inform you that the personal data you have provided will be processed in compliance with the aforementioned Regulation and with confidentiality obligations applicable to this company.

RCR Cristalleria Italiana S.p.A., in the person of the pro tempore legal representative, as controller of data to be processed (hereinafter “Data Controller”), informs you that pursuant to Art. 13 of the GDPR your data will be processed in the following manner and for the following purposes:

Object of processing

The Data Controller will process personal data communicated by users: name, surname, e-mail, telephone number.

Purpose of processing

Personal data provided spontaneously by users who freely consult the site, when making a job application, when requesting information or communicating any other information as customers or suppliers of our company will be processed for the following purposes:

• sales promotion and forwarding of information regarding products supplied by RCR Cristalleria Italiana S.p.A., as well as for informing, promoting and publicizing, also by e-mail, the products marketed by the undersigned company.

Methods of processing and storage

The processing of personal data is performed using the methods indicated in Art. 4 no. 2) of the GDPR. Processing will be performed manually, electronically as per company procedures, in compliance with the security measures pursuant to Art. 32 of the GDPR 2016/679, by authorized persons, in compliance with the provisions of art. 29 of this Regulation. Your personal data are processed using the aforementioned methods in compliance with the principles of lawfulness, limitation of purpose and minimization of data, pursuant to Art. 5 of the GDPR, and will be stored applying the best security and confidentiality criteria.

The Data Controller will process personal data for a maximum period of 24 months.

Sphere of communication and circulation

Your personal data will not be “circulated”, namely, they will not be shared with unspecified subjects; these data may, however, be “communicated” by us, namely they will be shared with one or more specific subjects, in particular where required by law with public and private subjects.

Transfer of personal data

Pursuant to Articles 44ff of the GDPR, your personal data may be transferred to third countries should the need arise.

Rights of the interested party

Pursuant to Articles 15–22 of the GDPR, you may exercise your given rights at any time, including right of access, rectification, portability, and deletion or limitation of processing of personal data.

How to exercise your rights

You may exercise your rights via written request sent to RCR Cristalleria Italiana S.p.A., at the postal address: Località Catarelli 53034 Colle di Val d’Elsa (SI), Italy, or at the certified e-mail address rcrspa@legalmail.it

Data Controller, Person in Charge, Tasked Persons

The Data Controller is the pro tempore legal representative.

The updated list of Persons in Charge and Tasked Persons is filed at RCR Cristalleria Italiana S.p.A., with registered office in Località Catarelli 53034 Colle di Val d’Elsa (SI) Italy, Tax and VAT number 01212980526.